Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/74843a19-cc51-3601-b081-cd7c1ad47a36.roa
File:                     74843a19-cc51-3601-b081-cd7c1ad47a36.roa (raw, json)
Hash identifier:          +b753CFRp4e68ixfSBZpLOg0sa340A7HxagTEEzAkVI=
Subject key identifier:   D0:A2:3E:31:A4:CE:86:EC:B4:B7:C5:91:D8:18:EB:A4:84:B4:2C:53
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584A8C70C64966141B0FA5F52F20
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/74843a19-cc51-3601-b081-cd7c1ad47a36.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     7862
IP address blocks:        146.23.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c6:49:66:14:1b:0f:a5:f5:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=fe1b7ff6-3e37-4e28-9619-701723eff026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:2c:44:a3:96:7b:cf:0d:36:39:67:e5:ba:
                    33:6e:16:03:dd:04:30:67:b2:37:7e:44:8b:2d:83:
                    32:65:93:c2:d0:5f:30:89:00:60:bb:39:36:1d:a4:
                    fc:7e:ae:17:5a:33:ad:3f:7b:85:22:29:ef:da:8a:
                    74:69:db:50:72:1f:39:b9:3c:83:3c:2d:63:e9:ff:
                    37:35:a8:17:15:19:3b:9e:dc:a8:a0:f3:32:6e:ae:
                    89:39:47:86:b4:87:91:f1:b5:7d:3e:0b:e1:f6:21:
                    bd:93:e0:6c:a2:66:53:e5:e2:96:2b:f7:9f:f3:7a:
                    47:5f:b0:41:4c:08:57:0d:f3:9f:6e:74:8a:56:c9:
                    93:f3:65:63:d3:fd:5e:c3:cd:ef:07:89:66:21:58:
                    31:83:73:1f:d1:e0:1f:0c:98:25:f6:91:58:51:42:
                    a8:93:9e:04:2f:b7:d1:d4:22:02:f0:41:c1:05:d8:
                    91:9b:8e:65:6c:b5:9d:95:14:99:75:9e:bc:5b:5e:
                    bd:2a:97:a0:df:2a:1a:d3:24:fa:03:36:cf:00:8a:
                    a6:ef:f9:88:fd:a6:9d:8f:d6:96:23:81:50:22:15:
                    b6:ce:16:af:31:6d:8b:66:e4:52:2c:22:03:e3:e0:
                    f4:5c:40:a5:c2:a9:44:33:ee:5b:12:71:64:6b:a6:
                    5b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:3E:31:A4:CE:86:EC:B4:B7:C5:91:D8:18:EB:A4:84:B4:2C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/74843a19-cc51-3601-b081-cd7c1ad47a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:b5:8b:bd:77:8c:b1:d0:56:73:98:ae:dd:c0:b2:fe:ee:67:
         8d:38:5f:e2:d9:1b:55:c1:e0:f0:dd:ae:c5:1f:9a:68:01:bd:
         da:f3:b9:e0:eb:11:ee:9d:8d:fc:0c:2c:0d:b4:66:ae:6f:43:
         59:27:61:d2:d5:5e:15:fa:4e:1f:1e:19:55:bc:ea:1e:da:df:
         e0:d6:00:94:70:2d:4f:fa:13:c3:1c:71:f7:c0:5c:23:87:25:
         e7:71:0d:28:cc:06:69:8a:ba:6a:ab:6b:5a:1b:5f:64:6c:42:
         1d:f9:dc:33:8e:43:a1:40:59:15:69:e6:53:e5:cc:95:f5:90:
         b9:1e:b1:00:a6:fc:e1:2f:04:be:81:3b:7d:a6:6d:76:3b:f9:
         0b:a1:52:f2:7d:5a:51:30:05:93:6e:41:1b:9d:46:21:24:b1:
         76:82:5c:5d:c2:51:a6:67:80:13:d5:4d:d4:85:7c:59:66:d3:
         98:e8:23:09:21:2d:24:27:fc:ef:cf:3f:23:66:4c:89:e3:52:
         36:1f:e1:51:e7:ae:f2:37:d4:0b:4a:d3:d1:5b:73:74:fd:b6:
         d1:db:74:e2:db:03:a3:40:9c:63:ff:44:b6:93:0a:c7:8b:0f:
         19:b0:4c:34:99:87:67:b4:9b:3a:ae:1c:1b:be:d3:c8:11:ca:
         c0:59:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:35:43 2025 by rpki-client